Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: RWJye5prVRqL/xpWiKZZQL/6O0lUp0weu91pAWxkhWc=
Subject key identifier: 12:09:92:42:36:F9:A0:D9:CB:D1:12:B2:BF:C9:5F:78:13:E9:73:29
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 0199FC58A35A7DC45D88D24A2C99A148C66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 15E1
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: GYGlq+cm+x7ZhCRrNgzwkUQVDKAOLHVl+hnWrkTTYEU=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:5a:7d:c4:5d:88:d2:4a:2c:99:a1:48:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=1209924236f9a0d9cbd112b2bfc95f7813e97329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:c8:ab:eb:df:31:0d:b1:c7:86:16:d4:c4:
71:04:9c:5b:d3:22:dd:a2:89:bd:8e:e1:b2:fe:8c:
d7:4c:47:43:15:ab:d2:bb:b6:cc:58:5c:3d:db:d0:
6d:30:0c:2d:46:9b:ea:12:a6:25:13:04:e8:2a:2b:
38:b4:92:69:94:f9:de:9c:61:90:ec:95:59:fa:b6:
76:78:6c:cc:60:b5:46:e5:22:38:bd:df:95:07:df:
f6:fb:8f:3e:05:50:fe:26:75:5a:63:58:40:32:76:
88:37:b9:e5:a2:9e:11:4b:d2:2d:4a:30:63:c5:5e:
35:7e:0e:da:20:83:ea:75:d3:57:93:5f:0f:3a:bf:
66:62:85:e3:7f:9f:af:ef:8c:33:ad:1c:ad:7d:51:
01:3c:e3:fe:ed:66:cf:54:f6:82:24:d1:5d:7c:61:
20:cf:88:16:18:9c:2b:19:97:bc:f6:ab:89:a2:13:
fe:11:0a:f9:93:0d:df:cd:af:cd:1a:85:70:e5:9b:
37:7e:89:57:70:d1:c9:36:00:dd:ea:c9:02:a8:93:
40:c9:f2:bc:c6:96:ec:a4:32:3d:cc:54:f7:e1:03:
c0:5b:a8:45:a9:47:ed:ee:e1:27:b0:73:f1:04:e9:
a5:a1:b5:e4:9e:2e:94:4e:cb:f0:88:5d:aa:f7:78:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:92:42:36:F9:A0:D9:CB:D1:12:B2:BF:C9:5F:78:13:E9:73:29
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:f4:ed:37:9a:9f:4d:b8:d7:b4:77:8f:31:87:0a:8b:80:
3f:99:cc:e9:04:6b:bf:87:fd:cc:7c:aa:3b:b7:83:05:cb:ac:
d8:47:c4:ec:96:0f:cd:15:72:59:6e:60:48:3c:f1:03:3d:48:
c0:a2:8e:f4:9b:25:81:06:6a:cf:77:69:e5:d5:fc:e8:80:bd:
9b:8e:7e:f5:bf:dc:5d:97:37:be:9e:ab:93:c3:7b:a7:c4:53:
28:4b:0e:94:4d:3c:48:bb:d5:8a:33:a4:31:de:de:f0:3b:00:
1c:89:83:3d:6c:be:fe:c4:1e:6e:84:f2:9b:47:d4:8e:75:66:
ff:a7:0f:6d:99:5c:48:1d:77:cf:e6:a4:80:f7:74:56:1a:fd:
a8:06:33:7c:7c:33:c4:53:0c:d1:59:a0:2e:c1:c5:a0:7c:35:
5b:a9:c4:6d:a8:a1:2d:57:0b:8e:f9:50:da:95:21:aa:8f:9b:
38:6b:52:6f:f7:a6:05:20:dc:d1:6c:79:32:85:ab:58:8b:44:
b5:de:17:27:f5:bf:28:34:bc:9a:b0:bb:c3:7b:82:52:fa:71:
3e:21:31:8b:fe:ef:71:49:c8:32:bd:f8:7f:5e:cc:60:83:73:
df:6f:e2:f9:d7:e3:78:60:e7:72:06:f0:22:89:d7:b5:de:5b:
ab:60:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:43 2025 by rpki-client